Update Spring All

build.gradle

@@ -4,8 +4,8 @@ plugins {
   id 'org.sonarqube' version '4.0.0.2929'
   id 'jacoco'
   id 'info.solidsoft.pitest' version '1.9.11'
-  id 'io.spring.dependency-management' version '1.0.12.RELEASE'
-  id 'org.springframework.boot' version '2.5.15'
+  id 'io.spring.dependency-management' version '1.1.6'
+  id 'org.springframework.boot' version '2.7.18'
   id 'uk.gov.hmcts.java' version '0.12.12'
   id 'org.owasp.dependencycheck' version '10.0.3'
   id 'com.github.ben-manes.versions' version '0.46.0'
@@ -309,7 +309,7 @@ dependencyManagement {
     }
 
     //CVE-2021-22112
-    dependencySet(group: 'org.springframework.security', version: '5.7.10') {
+    dependencySet(group: 'org.springframework.security', version: '5.8.14') {
       entry 'spring-security-crypto'
     }
 
@@ -325,7 +325,7 @@ dependencyManagement {
     dependency group: 'org.yaml', name: 'snakeyaml', version: '2.0'
 
     //CVE-2021-22118
-    dependencySet(group: 'org.springframework', version: '5.3.28') {
+    dependencySet(group: 'org.springframework', version: '5.3.39') {
       entry 'spring-aop'
       entry 'spring-aspects'
       entry 'spring-beans'
@@ -364,7 +364,7 @@ dependencyManagement {
     }
 
     // CVE-2023-33202
-    dependency group: 'org.springframework.security', name: 'spring-security-rsa', version: '1.1.1'
+    dependency group: 'org.springframework.security', name: 'spring-security-rsa', version: '1.1.5'
 
     //CVE-2023-6378, CVE-2023-6481
     dependencySet(group: 'ch.qos.logback', version: '1.2.13') {
@@ -373,7 +373,7 @@ dependencyManagement {
     }
 
     // CVE-2023-34042
-    dependency group: 'org.springframework.security', name: 'spring-security-crypto', version: '5.8.10'
+    dependency group: 'org.springframework.security', name: 'spring-security-crypto', version: '5.8.14'
   }
 }